$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: IbPBypASH5L9VbuoU2quANJ7aR87vP1de4MG6ieK2EE= Subject key identifier: 8E:DB:B4:B3:26:7E:36:F1:33:6E:72:67:BC:D9:AC:B5:A2:C0:5D:93 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: ED Signing time: Thu 05 Jun 2025 04:44:54 +0000 Manifest this update: Thu 05 Jun 2025 04:44:54 +0000 Manifest next update: Thu 12 Jun 2025 04:44:54 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: Ppiv/ZOmp16UESa3xxnC3qTeZ0X3y8RisLU03EGyaSE=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Jun 5 04:44:54 2025 GMT Not After : Jun 12 04:44:54 2025 GMT Subject: CN=684120c6-d719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:38:57:d7:49:cd:d6:eb:10:0d:4a:01:6a: 9b:0b:16:99:22:1a:bc:d3:4b:40:54:11:86:6b:c5: ef:18:f0:e4:1c:b0:ea:52:ac:1a:b3:fa:8d:fc:b9: e8:94:97:fd:af:54:f6:a8:b4:fe:d7:51:b5:eb:ec: b4:ea:8b:6d:fa:04:d3:fa:1e:69:79:2c:d1:50:9a: 86:70:e8:8c:f2:47:f1:bd:e8:11:bf:04:8c:11:a2: 73:74:90:ee:91:4c:6b:ea:79:84:56:66:15:70:e2: 97:bb:a0:66:92:2e:d3:bc:a5:d9:ae:1f:57:ac:bf: b4:80:48:50:8d:b2:9b:25:67:51:8c:0a:6f:99:d4: d3:b7:5a:61:a3:76:46:5e:1d:d8:83:fe:12:0b:31: da:9e:f4:fd:1e:48:57:5e:ba:80:39:7c:5e:7d:58: ce:21:3e:83:6b:74:bf:41:3d:2b:51:9c:c4:91:68: fe:8b:5f:b9:8e:3b:37:68:0b:eb:6c:57:c5:b8:93: 86:d6:f1:fc:4e:15:85:b0:eb:df:28:5c:83:f8:76: 73:67:4f:e3:57:c5:81:f0:00:50:52:40:ad:71:7e: 33:55:fb:9a:7c:8c:08:07:72:f1:15:9f:69:f7:88: fb:9a:ea:86:cd:83:86:bf:67:e9:28:1e:21:cd:90: d7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:B4:B3:26:7E:36:F1:33:6E:72:67:BC:D9:AC:B5:A2:C0:5D:93 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:73:47:f8:98:4b:f4:0b:a3:f7:98:e6:82:17:a6:8f:b7:0a: 6c:fa:06:11:69:7b:ff:3f:ce:83:8f:b9:eb:75:b3:83:18:41: 67:4d:ac:4c:91:c2:3e:3e:dd:12:82:01:cf:b1:4b:5a:68:3f: 0b:ce:2f:aa:19:31:13:cf:48:21:6c:2f:fa:fd:f6:a2:13:90: b0:f7:9b:cd:bc:b8:da:04:0f:04:52:0e:43:73:99:2d:02:48: 34:50:e9:25:58:07:b5:38:c3:1a:64:8a:98:f5:6d:4b:37:a0: 48:0d:ae:20:77:a1:66:32:97:55:ab:d8:c6:41:0a:5d:12:04: e7:5d:a1:21:43:93:37:eb:8c:e3:97:b4:3f:d5:3d:35:d7:75: 98:83:93:ff:f3:ec:15:c1:e8:44:95:64:6e:82:c7:ec:fa:2f: 91:c3:3d:f6:70:db:54:51:02:b4:02:d2:30:1f:29:4d:db:e3: 22:c4:c0:56:7a:d4:e7:d8:89:b1:bc:17:1e:3a:1a:ae:f0:9b: 55:80:0c:f2:0c:c2:ed:77:91:b1:4e:f2:09:c2:68:60:78:92: 91:d4:ef:37:d5:60:27:f2:4d:db:2c:af:69:e0:06:ce:db:1a: 93:5e:6f:b0:af:55:a7:fd:9b:72:a2:76:09:70:6e:c3:d7:ad: 05:3c:6c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjUwNjA1MDQ0NDU0WhcNMjUwNjEyMDQ0NDU0WjAYMRYwFAYD VQQDEw02ODQxMjBjNi1kNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4o4V9dJzdbrEA1KAWqbCxaZIhq800tAVBGGa8XvGPDkHLDqUqwas/qN/Lno lJf9r1T2qLT+11G16+y06ott+gTT+h5peSzRUJqGcOiM8kfxvegRvwSMEaJzdJDu kUxr6nmEVmYVcOKXu6Bmki7TvKXZrh9XrL+0gEhQjbKbJWdRjApvmdTTt1pho3ZG Xh3Yg/4SCzHanvT9HkhXXrqAOXxefVjOIT6Da3S/QT0rUZzEkWj+i1+5jjs3aAvr bFfFuJOG1vH8ThWFsOvfKFyD+HZzZ0/jV8WB8ABQUkCtcX4zVfuafIwIB3LxFZ9p 94j7muqGzYOGv2fpKB4hzZDXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7btLMm fjbxM25yZ7zZrLWiwF2TMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADc0f4mEv0C6P3mOaCF6aPtwps+gYRaXv/P86Dj7nrdbODGEFnTaxM kcI+Pt0SggHPsUtaaD8Lzi+qGTETz0ghbC/6/faiE5Cw95vNvLjaBA8EUg5Dc5kt Akg0UOklWAe1OMMaZIqY9W1LN6BIDa4gd6FmMpdVq9jGQQpdEgTnXaEhQ5M364zj l7Q/1T0113WYg5P/8+wVwehElWRugsfs+i+Rwz32cNtUUQK0AtIwHylN2+MixMBW etTn2ImxvBceOhqu8JtVgAzyDMLtd5GxTvIJwmhgeJKR1O831WAn8k3bLK9p4AbO 2xqTXm+wr1Wn/ZtyonYJcG7D160FPGwK -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:30 2025 by rpki-client